CA-C-000571
Udemy — Udemy Privacy Policy
Entity
Date detected
April 20, 2026
Effective date
April 20, 2026
Severity
High
Direction
Negative
Affected users
all users eu users uk users california residents business accounts
Taxonomy
Transparency removal
Changes
−208 sentences removed · 1 sentence modified
Share 𝕏 Share in Share 🔒 PDF
🔔 Get alerted when Udemy changes their policies.
Watcher — $9.99/mo Professional →

What Changed

Udemy's Privacy Policy page now returns a 'page not found' error, meaning the full privacy policy content has been removed or made inaccessible as of April 20, 2026. Before this change, the page contained a comprehensive privacy policy explaining how Udemy collects, uses, and shares your personal data. This matters because users currently cannot access Udemy's privacy disclosures through the standard policy URL.

Consumer Impact (what this means for users)

Udemy's Privacy Policy is no longer accessible at its standard location, meaning users cannot review how their personal data is collected, used, or shared. This removes a fundamental transparency mechanism that consumers and regulators rely on to understand their data rights. You can visit Udemy's support page or contact Udemy directly to request a copy of their current privacy policy.

Obligation Changes (what shifted)

1
Protection removed
Consumers Removed

Udemy users can no longer read the privacy policy that explains what data is collected about them and how it is used.

Data controllers Removed

Udemy is currently failing to meet its legal duty to make privacy information available to users.

Applicable regulations

CCPA/CPRA
California, USA
CFAA
United States Federal
CAN-SPAM
United States Federal
GDPR
European Union

Why It Matters (compliance & risk perspective)

Users have a legal right in many jurisdictions to know how their data is collected and used, and Udemy's inaccessible privacy policy currently denies them that access. This may also invalidate consent obtained while the policy is unavailable and creates immediate regulatory exposure for Udemy and its enterprise customers.

Key Clauses Affected

Privacy Policy Accessibility

The entire privacy policy content has been removed or made inaccessible, replaced by a 404 error page.

Data Subject Rights Disclosures

Users can no longer access information about their rights regarding personal data, including access, deletion, and portability rights.

Data Collection and Use Disclosures

All information about what data Udemy collects and how it is used has been removed from public access.

Full clause-by-clause analysis available with Watcher.

Evidence Verification

✓ Verified
Previous Version
3b8dc2ffe1d8059778881fb195acd21b5f76bd4b566942fadee257530839871d
April 19, 2026 06:13 UTC
✓ Verified
Current Version
6a6c0aed8db59ed01baddd4fb86c21fe22b86fbd56ed90628ce929f03514ab25
April 20, 2026 06:14 UTC
✓ Verified
Change Detected
April 20, 2026 06:14 UTC
✓ Verified
Source Document
https://www.udemy.com/terms/privacy/
How to Cite
ConductAtlas Policy Archive
Entity: Udemy | Document: Udemy Privacy Policy | Record: CA-C-000571
Captured: 2026-04-20 06:14:31 UTC
URL: https://conductatlas.com/change/2026-04-20-udemy-udemy-privacy-policy-571/
Accessed: May 2, 2026

Unlock the full analysis

Institutional analysis Clause breakdown Document redline Citation export
Watcher — $9.99/mo Professional — $149/mo

14-day free trial available.

Institutional Analysis (Compliance & legal intelligence)

Assessment

Udemy's Privacy Policy page returned a 404 error as of April 20, 2026, rendering the policy inaccessible to users and compliance teams. This directly implicates GDPR Art. 13 and Art. 14 transparency obligations, CCPA notice-at-collection requirements, and UK GDPR equivalents. Any organization that references or relies on Udemy's privacy policy in its own vendor assessments or DPAs should flag this immediately. Action is required: confirm whether the policy has moved to a new URL or has been genuinely removed, and update vendor risk assessments accordingly.

Regulatory Exposure

1. GDPR Art. 13(1) and Art. 13(2) — requires data controllers to provide privacy information at the time of data collection; an inaccessible policy is non-compliant.

🔒

Compliance intelligence locked

Obligation analysis, escalation trigger, board language, and recommended action.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations + obligations. Professional: full compliance memo.

ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-000571.

Full Changes

See the full side-by-side comparison of every sentence added, removed, and modified.

🔒 Unlock full diff — Watcher $9.99/mo

Document Context

Document
Udemy Privacy Policy
Entity
Udemy
Captured
April 20, 2026
Source URL
https://www.udemy.com/terms/privacy/
More from Udemy
Apr 22, 2026 Medium
Udemy Privacy Policy

Udemy replaced a placeholder error page with their full Privacy Policy on April 22, 2026. The previous version of this …

Apr 20, 2026 Medium
Udemy Terms of Use

On April 20, 2026, Udemy updated their Terms of Use page by removing the welcoming introductory text that described the …

Stay ahead of policy changes

We monitor 200+ platforms and archive every change — verified and timestamped.